Known vulnerabilities in Hugging Face LeRobot
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-25874 | LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where… | 9.3 Critical | Apr 23, 2026 |